CVE-2022-3598Out-of-bounds Write in Tiff

CWE-787Out-of-bounds Write10 documents7 sources
Severity
6.5MEDIUMNVD
OSV5.5
EPSS
0.0%
top 87.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 21
Latest updateNov 8

Description

LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit cfbb883b.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages5 packages

NVDlibtiff/libtiff3.9.04.4.0
CVEListV5libtiff/libtiff<=4.4.0
debiandebian/tiff< tiff 4.4.0-5 (bookworm)

Also affects: Debian Linux 10.0

Patches

🔴Vulnerability Details

4
OSV
tiff vulnerabilities2022-11-08
OSV
tiff vulnerabilities2022-10-27
OSV
CVE-2022-3598: LibTIFF 42022-10-21
GHSA
GHSA-4cf4-hqwp-cpp8: LibTIFF 42022-10-21

📋Vendor Advisories

5
Ubuntu
LibTIFF vulnerabilities2022-11-08
Ubuntu
LibTIFF vulnerabilities2022-10-27
Microsoft
LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile l2022-10-11
Red Hat
libtiff: out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c2022-06-13
Debian
CVE-2022-3598: tiff - LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in...2022